$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: EQFeTkRNN0xIq8PsgQM8QPLPkEOVrqxLJI0xAF91DFk= Subject key identifier: 05:A9:73:7B:86:0A:65:04:17:9B:47:4F:70:51:7F:7A:52:48:A1:0A Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019CAB6B3C401374A57EE04000829000FE7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 08D4 Signing time: Sun 01 Mar 2026 22:00:57 +0000 Manifest this update: Sun 01 Mar 2026 22:00:57 +0000 Manifest next update: Mon 02 Mar 2026 22:00:57 +0000 Files and hashes: 1: DD8GlU-b7VspBkcI_iIvr_RGPjM.roa (hash: 1DKJJF4hfxzBvntYwqTBxwoFNy0hvNUjzhgFWAAfUuQ=) 2: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: gzT8vwwsGIGY5cCxHvUEF/YjaT+PPTkxRS77EMmClyA=) 3: OUk4bgGC3OCebo2r3JX7kFSxVtw.roa (hash: 3wGYjxsZ43jN+PMrritKLslUAurQFB46XPi5qVQJ22Y=) 4: RjQGNYymIhhTpLXsvAqFCRYlmK0.roa (hash: 7eWaoKsFK+dXrDDvViANKRbdVD7AqyGyUhoJ/7eX31o=) 5: TqnPMVDh9HpYev_FIZchp86-qnU.roa (hash: PYVLbHuRs4EcM0BL7ja7AFfgZkv0Ouc4hw35RTYQcM4=) 6: bUm9zhBDDheeAjH1Phzh6QeVwx0.roa (hash: nX9HfLwNd8RrklBkKB4N/M+Uec4jgpinRrWvqTbblWw=) 7: darhr2jXl3Y2Sj0q2YhpErawJTA.roa (hash: +2YSXVZu56cjmNQqpda6l8hnoAubEs72p1pcn5+Ljy8=) 8: hCl-0r0u30gY3X_QTYVrlxuoF0A.roa (hash: 7PsKvjXxiXeu119UcG4oPYszfeXApUMOiVMhsPclDPA=) 9: hLNuu_sbAvc6aYBd_nA5cx_gzt8.roa (hash: l0oUAYvx1+pRIjX6Aa7SZOYLA8siUWlxjSjZBHxavhM=) 10: jPE8eDy5sBpOJ0xF-JIqu7BD2Ew.roa (hash: 74IQiVstIh3KzJDiJivZ5vXC5OARjoNqNmVIrOMQl9I=) 11: jVEF_UAaRYmedHKGuIyseg1gcbY.roa (hash: tjDxlBVUYxs7z18gz8wlAFg0M0h3WVlIHdRrd9k9MOQ=) 12: l0NWcEB_fCMnIaGuYDA0vM-VAzk.roa (hash: asETUMWyauH7zadLdSq6MApEL56kP70KwYwJo1bqytM=) 13: pM5HyRJ0tXqa3u3HJO4MenSMSKA.roa (hash: eDbwn0mnmgvF86dDy5bv6IYDjmTGECKb7lV458qQ5XM=) 14: sKa8KGSQMDeu4xjp-76scAkNmoM.roa (hash: BDhEXOrhFxU6yRZ6pUCYht36ar+0175olhnKUrOoWm8=) 15: tRowsns90J8SVu4Vuk4KwWdxtlI.roa (hash: 8fa16LnJWtPW8DQIUED5RuRMWErqx7miQXyVpxamI30=) 16: thQeBvJ49lds_EA91PLLCSwLWIw.roa (hash: kGYpWoGUWthYejf7i/yF1EVl5j1QxZxFpEKnwmEBGZE=) 17: tqLA3niYgXo7rtb9KpiVm9YQRsI.roa (hash: JApSiGrHRmdCS2s34nRBKnv5Jb7erd5zPvaQUBbAO4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:6b:3c:40:13:74:a5:7e:e0:40:00:82:90:00:fe:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Mar 1 22:00:57 2026 GMT Not After : Mar 2 22:00:57 2026 GMT Subject: CN=05a9737b860a6504179b474f70517f7a5248a10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:85:9d:41:7f:52:ee:d8:ca:fd:ba:b2:57:9e: d2:80:3f:6c:ba:e3:8a:8d:3f:81:79:57:76:dc:57: 2b:b2:c5:8a:47:fc:b4:06:4d:86:fc:b7:7f:f2:32: 08:a4:ad:ac:a9:66:96:95:bf:7b:4e:29:80:91:14: 76:7f:17:87:c9:a3:90:43:00:f4:2a:66:e1:fb:24: 9b:39:b8:b6:c4:f6:d5:f9:9b:ee:21:ad:d3:16:87: a5:e4:69:58:c3:35:9d:3c:67:ee:46:1f:d1:ad:6f: f0:e3:f5:21:27:ca:20:6b:d7:da:35:40:d9:9a:d4: aa:e0:97:fe:f0:fb:95:a4:49:ce:b9:2c:95:6c:a5: 19:e7:bd:65:d8:1e:d8:0d:96:cc:23:e0:3e:54:16: eb:82:40:3d:fb:12:6b:04:f1:fb:36:97:74:f9:0d: 0b:52:28:02:99:b3:ab:34:f6:7b:70:5b:84:ba:fa: e7:ea:93:fb:7d:15:ee:28:62:9f:81:0d:c5:81:6b: 85:ce:73:56:0f:ab:09:4f:39:c9:fe:59:48:05:84: 23:2a:6d:63:cd:aa:10:f4:3f:bf:55:fa:a4:c0:ec: 6b:1e:ae:0d:b9:c2:e9:d2:fb:58:9d:37:fe:7a:cb: 3b:cd:bd:c4:c4:ae:cd:d7:95:89:b8:3a:e0:51:ce: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A9:73:7B:86:0A:65:04:17:9B:47:4F:70:51:7F:7A:52:48:A1:0A X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:37:78:e2:08:bb:32:57:fe:e4:35:a7:07:a7:4d:a5:0e:91: df:32:00:76:4d:1c:68:1b:86:42:a0:c7:df:39:19:f9:f7:f7: 51:10:3a:b2:d2:f6:41:3c:3c:b4:c7:29:c4:76:63:b7:c3:6d: ea:b3:06:bc:37:80:56:5b:c5:0d:77:55:b9:39:3b:e7:a3:ef: 05:89:c9:b2:a6:8d:78:ac:db:c0:63:04:d2:17:c1:4f:f6:fe: 5a:d2:16:fe:29:bc:1b:e0:ac:21:9b:7d:77:13:79:fa:8c:6f: 7c:29:b1:4c:d9:ee:52:16:9f:1c:6c:a0:cd:df:ca:7f:d9:51: e9:5c:e5:1f:f2:5a:c0:b7:79:c6:ca:18:27:8a:3a:0a:d0:ff: 1c:bb:b6:8c:ce:68:6d:ba:61:bc:aa:3a:a1:67:76:cb:61:5c: 12:b2:ad:a5:b8:fe:3f:fd:d0:9a:d5:d5:93:ec:c4:6d:22:f3: 2a:35:5c:b1:51:3d:76:a0:50:43:b3:3a:74:70:9b:48:a2:de: cc:3a:18:97:02:ba:22:9e:ad:25:f5:f8:a2:da:fd:42:f3:cc: ec:15:55:29:6d:d1:68:85:63:ce:23:fb:e8:4b:2e:5c:a6:01: d7:eb:33:73:bb:f2:12:e0:d8:6a:78:19:07:a5:0a:40:35:c0: 18:d3:2e:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrazxAE3SlfuBAAIKQAP5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMzAxMjIwMDU3WhcNMjYwMzAyMjIwMDU3WjAzMTEwLwYDVQQD EygwNWE5NzM3Yjg2MGE2NTA0MTc5YjQ3NGY3MDUxN2Y3YTUyNDhhMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14WdQX9S7tjK/bqyV57SgD9suuOK jT+BeVd23FcrssWKR/y0Bk2G/Ld/8jIIpK2sqWaWlb97TimAkRR2fxeHyaOQQwD0 Kmbh+ySbObi2xPbV+ZvuIa3TFoel5GlYwzWdPGfuRh/RrW/w4/UhJ8oga9faNUDZ mtSq4Jf+8PuVpEnOuSyVbKUZ571l2B7YDZbMI+A+VBbrgkA9+xJrBPH7Npd0+Q0L UigCmbOrNPZ7cFuEuvrn6pP7fRXuKGKfgQ3FgWuFznNWD6sJTznJ/llIBYQjKm1j zaoQ9D+/VfqkwOxrHq4NucLp0vtYnTf+ess7zb3ExK7N15WJuDrgUc6NGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWpc3uGCmUEF5tHT3BRf3pSSKEKMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTd44gi7 Mlf+5DWnB6dNpQ6R3zIAdk0caBuGQqDH3zkZ+ff3URA6stL2QTw8tMcpxHZjt8Nt 6rMGvDeAVlvFDXdVuTk756PvBYnJsqaNeKzbwGME0hfBT/b+WtIW/im8G+CsIZt9 dxN5+oxvfCmxTNnuUhafHGygzd/Kf9lR6VzlH/JawLd5xsoYJ4o6CtD/HLu2jM5o bbphvKo6oWd2y2FcErKtpbj+P/3QmtXVk+zEbSLzKjVcsVE9dqBQQ7M6dHCbSKLe zDoYlwK6Ip6tJfX4otr9QvPM7BVVKW3RaIVjziP76EsuXKYB1+szc7vyEuDYangZ B6UKQDXAGNMu4g== -----END CERTIFICATE-----Generated at Mon Mar 2 01:49:53 2026 by rpki-client